t-mobile[.]xrkhui[.]top

PhishDestroy identifies t-mobile.xrkhui.top as an active phishing domain posing as a T-Mobile login portal. The threat type is generic phishing, with an elevated risk level due to its deceptive branding and active infrastructure. This domain is designed to harvest user credentials under the guise of a legitimate telecom service. This domain was flagged by 8 out of 95 VirusTotal security vendors, indicating significant malicious activity. It was registered through NameSilo,LLC and resolves to IP address 188.114.97.3. The domain was created on May 08, 2026, and secured with a Let's Encrypt SSL certificate. Its recent creation and low trust scores suggest opportunistic malicious deployment. To mitigate risk, users should avoid accessing t-mobile.xrkhui.top entirely. If credentials were entered, immediately reset passwords for T-Mobile accounts and enable multi-factor authentication. Report the domain to your email provider or security team for blocking. Monitor accounts for unusual activity, as stolen credentials may be used for further exploitation.